CRIPTOGRAFIA - FESP

Now, start the server:
service openvpn start
Run : ifconfig
You can see a new interface tun0 : this is the vpn interface
Note on pkcs#11: (you can skip this part if not interested and go to the next
part: Configure Shorewall, or go back to the Table of contents).
With the Beta 2.1 of OpenVPN and on a cooker or Mandriva 2007 you can
generate pkcs11 certificates.
2006 can work with these certitficates, but not generate them.
To generate pkcs#11 certificates on a cooker or Mandriva 2007 use one of the
apropriate openvpn-2.1 rpms here:
RPMs
And then do as follows:
urpmi opensc engine_pkcs11 openct openvpn-2.1_beta14-1.i586.rpm
service openct start
Then :
cp -r /usr/share/doc/openvpn-2.1_beta14/easy-rsa/ /etc/openvpn/
cd /etc/openvpn/easy-rsa/2.0/
In /etc/openvpn/easy-rsa/2.0/ edit openssl.cnf and modify this section:
[ engine_section ]
#
# If you are using PKCS#11
# Install engine_pkcs11 of opensc (www.opensc.org)
# And uncomment the following
# verify that dynamic_path points to the correct location
#
#pkcs11 = pkcs11_section
[ pkcs11_section ]
engine_id = pkcs11
dynamic_path = /usr/lib/engines/engine_pkcs11.so
MODULE_PATH = $ENV::PKCS11_MODULE_PATH
PIN = $ENV::PKCS11_PIN
init = 0
to make it like this:
[ engine_section ]
#
# If you are using PKCS#11
# Install engine_pkcs11 of opensc (www.opensc.org)
# And uncomment the following
# verify that dynamic_path points to the correct location
#
pkcs11 = pkcs11_section